General Specifications

Transcription

1 General Specifications GS 32Q03B20-31E Model CFS1100 Safety Control Functions Package GENERAL Safety Control Functions Package is a software package that monitors a plant to ensure it is operating safely. The package also performs preset safety operations in response to requests for safety control. FUNCTIONAL SPECIFICATIONS The following describes the configuration and functions of the package: Configuration of CFS1100 Safety Control Functions Package The CFS1100 Safety Control Functions Package operates on Safety Control Stations (SCSs). The functions of the package can be divided into two groups: the application logic execution function group and the external connection function group. The application logic execution function group executes safety applications. The external connection function group performs communications with non-scs equipment. For example, this function group integrates the CENTUM VP or CENTUM CS 3000 (hereinafter, VP/CS 3000 ) with the package. SCS SENG HIS VP/CS 3000 FCS SCS Communication function V net or Vnet/IP Application logic execution functions Application logic execution function Process data I/O function Communication data I/O function Inter-SCS safety communication function SCS link transmission function Self-diagnosis function External communication functions RS-232C RS-422 RS-485 DCS of another company F01E.ai Application Logic Execution Functions This function group is the main part of the package that monitors the plant to ensure it is operating safely, and performs preset safety operations if any abnormalities occur. This group is composed of the following functions: Application logic execution function Process data I/O function Communication data I/O function (Subsystem communication function) Inter-SCS safety communications function SCS link transmission function Self-diagnosis function Yokogawa Electric Corporation , Nakacho, Musashino-shi, Tokyo, Japan GS 32Q03B20-31E Copyright July 2011 (YK) 3rd Edition Sep. 30, 2013 (YK)

2 2 External Communication Functions This function group, which performs communications between the application logic execution functions and non- SCS equipment, is composed of the following functions: VP/CS 3000 integration function Modbus connection function Sequence-of-events recorder (SOER) function Diagnosis information collection function PRM-supported HART on-demand communication Application Logic Execution Functions The application logic execution function, process data I/O function, inter-scs safety communication functions and SCS link transmission function are given below. Application Logic Execution Function This function can be created by using the Function Block Diagram (FBD), the Ladder Diagram (LD) or Structured Text (ST), all of which are compliant with the IEC The tables below list the functions and function blocks used in the FBD. Some elements from LD can also be used. Table Functions (FU) (1/2) Function ABS Gives the absolute (positive) value of a real value SQRT Calculates the square root of a real value +ADD +, meaning addition MUL, meaning multiplication SUB, meaning subtraction / DIV /, meaning division SHL Make the bits of an integer shift to the left. Shift is made on 32 bits. Zero is used to replace lowest bit. SHR Make the bits of an integer shift to the right. Shift is made on 32 bits. Highest bit is copied at each shift. ROL Make the bits of an integer rotate to the left. Rotation is made on 32 bits. ROR Make the bits of an integer rotate to the right. Rotation is made on 32 bits. AND AND OR OR XOR Exclusive disjunction (exclusive OR) NOT Negation SEL Selects one of two input values (INTEGER) SEL_R Selects one of two input values (REAL) SEL_T Selects one of two input values (TIME) MAX Selects the larger of two input values (INTEGER) MIN Selects the smaller of two input values (INTEGER) LIMIT Limits the range of the input values to output (INTEGER) MUX4 Selects one of four input values (INTEGER) MUX8 Selects one of eight input values (INTEGER) MUXBOOL4 Selects one of four input values (BOOL) MUXBOOL8 Selects one of eight input values (BOOL) MUXREAL4 Selects one of four input values (REAL) MUXREAL8 Selects one of eight input values (REAL) GT >, meaning greater than GE >=, meaning greater than or equal to EQ =, meaning equal LE <=, meaning less than or equal to LT <, meaning less than NE, meaning unequal SCALER Converts a % range of input values into a normalized range for outputting 1GAIN Assignment GS 32Q03B20-31E July 21,

3 3 Table Functions (FU) (2/2) Function IB_TO_V IB_TO_S IR_TO_V IR_TO_S Converts IO_BOOL-type input to data value Converts IO_BOOL-type input to data status Converts IO_REAL-type input to data value Converts IO_REAL-type input to data status Table Interference-free (*1) Functions (FU) Function ANY_TO_BOOL ANY_TO_DINT ANY_TO_REAL ANY_TO_TIME POW POWE ACOS ASIN ATAN COS SIN TAN LOG LOGE MOD Converts to BOOL-type Converts to INTEGER-type Converts to REAL-type Converts to TIME-type Performs power calculation Performs calculation of exponential function with base e Calculates the Arc cosine of a real value Calculates the Arc sine of a real value Calculates the Arc tangent of a real value Calculates the Cosine of a real value Calculates the Sine of a real value Calculates the Tangent of a real value Calculates the Common logarithm of a real value Calculates the Natural logarithm of a real value Calculates the Modulo of an integer value *1: Functions not affecting the safety loop Table Function Blocks (FB) (1/2) Function block SR RS R_TRIG F_TRIG CTU CTD CTUD TP TON TOF REPEATTIMER FILTER FILTER_S ANLG1OO2D ANLGVOTER BOOLVOTER ANLG_S(*1) ANLGI(*1) VEL(*1) Set dominant bistable Reset dominant bistable Detects a rising edge Detects a falling edge Count up counter Count down counter Count up/down counter Pulse timer which outputs pulses for a specified duration after rising edge detection On-delay timer Off-delay timer Alternates TRUE and FALSE outputs at specified intervals First-order lag filter First-order lag filter with data status analysis capability 1oo2D analog voter 3-input analog voter (IO_REAL) 3-input BOOL voter (IO_BOOL) Outputs high/low alarm with scale conversion (with data status input) Outputs high/low alarm with scale conversion Detects the velocity limit exceeded *1: When the VP/CS 3000 Integrated Engineering Package is used in conjunction with this package, the HIS of the VP/CS 3000 can perform operations and monitoring. GS 32Q03B20-31E Sep. 30,

4 4 Table Function Blocks (FB) (2/2) Function block SYS_STAT SYS_FORCE SYS_DIAG SYS_SECURE SYS_SEC_CTL SYS_IOALLST SYS_NODEST SYS_OUTST SYS_OUTST16 SYS_INST SYS_CHST SYS_CERR SYS_SCANEXT SYS_OVR SYS_PSWD SYS_OUTEN SYS_ALLSD SYS_IOSD SYS_FORCE_BD SYS_FORCE_LT SYS_LTSTS GOV_B GOV_IB OVR_B(*1) OVR_I(*1) OVR_R(*1) OVR_IB(*1) OVR_IR(*1) PASSWD(*1) MOB_11(*1) MOB_21(*1) MOB_RS(*1) MOA(*1) CONS_B CONS_I CONS_R PROD_B PROD_I PROD_R B_TO_IB R_TO_IR LTRCV LTSND ANN_FUP (*1) FUP_RST Manages the SCS status Manages forcing Outputs diagnosis information Manages Security level Protects Security level Detects fault in all I/O channels Detects fault in all I/O channels in node Detects fault in output module channels (for 8 channels) Detects fault in output module channels (for 16 channels) Detects fault in input module channels Detects fault in channels Indicates computation errors Indicates the extension of scan period Manages override function blocks Manages password function blocks Indicates Output module output status Shuts down Station output Shuts down Module output Manages forcing of inter-scs safety communication data Manages forcing of SCS Link Transmission Indicates SCS Link Transmission reception status Grouping overrides from HIS (BOOL) Grouping overrides from HIS (IO_BOOL) Overrides from HIS (BOOL) Overrides from HIS (INTEGER) Overrides from HIS (REAL) Overrides from HIS (IO_BOOL) Overrides from HIS (IO_REAL) Manipulates BOOL-type data using password from HIS Data manual operation with two-position answerback (BOOL) Data manual operation with three-position answerback (BOOL) Auto-reset data manual operation (BOOL) Analog-type data manual operation Receives data on consumer side for inter-scs safety communication (BOOL) Receives data on consumer side for inter-scs safety communication (INTEGER) Receives data on consumer side for inter-scs safety communication(real) Transmits data on producer side for inter-scs safety communication (BOOL) Transmits data on producer side for inter-scs safety communication (INTEGER) Transmits data on producer side for inter-scs safety communication (REAL) Converts data values and status to IO_BOOL-type outputs Converts data values and status to IO_REAL-type outputs Receives Safety Link Transmission data Sends Link Transmission data Detects the first-up alarm and transmits the annunciator message Resets the first-up alarm annunciator *1: When the CENTUM VP/CS 3000 Integration Engineering Package is used in conjunction with this package, the HIS of the VP/CS 3000 can perform operations and monitoring. GS 32Q03B20-31E July 21,

5 5 Table Interference-free (*1) Function Blocks (FB) Function block ANN(*2) SYS_SCAN SYS_IOMDSP SYS_NODEINF SYS_ESBINF SYS_NETST SYS_ALRDSP SYS_ALARM SYS_TIME SYS_FORCE_SC SYS_STAT_SC SOE_B SOE_I SOE_R ECW_B(*2) ECW_I(*2) ECW_R(*2) AVERAGE LIM_ALRM SCI_B(*2) SCI_I(*2) SCI_R(*2) SCO_B(*2) SCO_I(*2) SCO_R(*2) LTFCS SYS_SETTIME Transmits annunciator message Outputs application logic execution time and percentage of CPU idle time Outputs the IOM status Outputs node status Outputs ESB bus status Outputs Control bus status Outputs status of subsystem communication modules Outputs alarm transmission status Outputs SCS clock information Manages forcing of subsystem communication data Indicates output enable operation in subsystem communication BOOL-type data SOER INTEGER-type data SOER REAL-type data SOER Sets data of a BOOL-type variable from an external device Sets data of a INTEGER-type variable from an external device Sets data of a REAL-type variable from an external device Calculates the average of a specified duration Hysteresis on a real value for high and low limits Input from subsystem (BOOL) Input from subsystem (INTEGER) Input from subsystem (REAL) Output to subsystem (BOOL) Output to subsystem (INTEGER) Output to subsystem (REAL) Receives Interference-free Link Transmission data Sets the SCS time *1: Functions not affecting the safety loop *2: When the CENTUM VP/CS 3000 Integration Engineering Package is used in conjunction with this package, the HIS of the VP/CS 3000 can perform operations and monitoring. Table Ladder Elements Ladder Direct Contact Inverted Contact Contact with Rising Edge Detection Contact with Falling Edge Detection Direct Coil Inverted Coil SET Coil RESET Coil Coil with Rising Edge Detection Coil with Falling Edge Detection Direct contact Inverted contact Contact with rising edge detection Contact with falling edge detection Direct coil Inverted coil SET coil RESET coil Coil with rising edge detection Coil with falling edge detection GS 32Q03B20-31E Sep. 30,

6 6 Scan period of Application Logic Execution Function 50 milliseconds 1 second (in multiples of 10 milliseconds within this range) Process Data I/O Function For process data I/O, analog I/O modules and digital I/O modules are used. The table below lists I/O modules that SCSs can employ. Table I/O Modules Model SAI143 SAV144 SAT145 SAR145 SAI533 SDV144 SDV521 SDV526 SDV531 SDV53A SDV541 Module Name Analog input module (4 to 20 ma, 16-channel, module isolation) Analog input module (1 to 5 V/1 to 10 V, 16-channel, module isolation) TC/mV input module (16-channel, isolated channels) RTD input module (16-channel, isolated channels) Analog output module (4 to 20 ma, 8-channel, module isolation) Digital input module (16-channel, dry contact, module isolation) Digital output module (4-channel, 24 V DC/2 A, module isolation) Digital output module (4-channel, V AC, module isolation) Digital output module (8-channel, 24 V DC, module isolation) Digital output module (8-channel, 48 V DC, module isolation) Digital output module (16-channel, 24 V DC, module isolation) Table Interference-free (*1) Communication Modules Model ALR111 ALR121 ALE111 Module Name Serial communication module (RS-232C, 2-port) Serial communication module (RS-422/RS-485, 2-port) Ethernet communication module (1-port) *1: I/O modules not affecting the safety loop Inter-SCS Safety Communication Function When the inter-scs safety communication function is employed, a safety loop up to SIL 3 (Safety Integrity Levels) can be constructed for multiple SCSs via the V net or Vnet/IP. This function assures the authenticity, quality, proper sequence and timeliness of data. Specifications: The maximum number of SCSs with which safety communication is possible from one SCS is 16 (if one SCS performs bilateral communications, the number of SCS s is counted as 2). The maximum number of data items one SCS can transmit is 200. The maximum number of data one SCS can receive is 200. For the compatibility of revision of Inter-SCS safety communication, please refer to ProSafe-RS Safety Instrumented System Overview (for Vnet/IP) (GS 32Q01B10-31E) NETWORK SPECIFICATIONS Vnet/IP Compatibility in Inter-SCS safety communication. GS 32Q03B20-31E Nov. 28,

7 7 SCS Link Transmission There are two types of SCS Link Transmission: SCS Link Transmission Safety Communication and SCS Global Switch Communication. SCS Link Transmission is SIL 3 safety communication function to notify more than one SCS of data. Data in one station is transmitted simultaneously to other SCS on regular basis. One station; moreover, can receive data sent by other stations and refer to it by application logic. SCS Global Switch Communication makes it possible to refer the data transmitted between SCS and FCS. SCS Global Switch Communication is interference-free. Communication Specifications Communication range: limited to the same domain Control bus: V net, Vnet/IP Number of available stations: Maximum 63 (However, number of stations that can be referred to is different, depending on CPU as well as communication load) Transmission cycle: fixed to 100 ms Transmitted Data Reference/Setting Number of definition in input function block: Maximum 1000/1 SCS Number of definition in output function block: Maximum 128/1 SCS No limitation to the number of assignments per receiving station Software Requirements SCS program: R or later SENG software: R or later SCS project: R or later CS 3000 system revision: R or later CENTUM VP system revision: R4.01 or later FCS system program: R or later GS 32Q03B20-31E July 21,

8 8 External Communication Functions The VP/CS 3000 integration, Modbus communication, sequence-of-events recorder (SOER), and diagnosis information collection functions are described below: Scan period of External Connection Function 1 or 2 seconds. VP/CS 3000 Integration Function The VP/CS 3000 integration function allows the HIS of the VP/CS 3000 to control and monitor an SCS through a tag name interface as well as using a control tag. When the tag name is defined using the VP/CS 3000 integration function, the HIS of the VP/CS 3000 can not only monitor the SCS, but also perform a maintenance override. An annunciator message with a priority level assigned can be sent from the SCS. Table Types of SCS Data and Function Blocks for which Tag Name can be Assigned Function category SCS definition Function category Functions BOOL type Internal variable BOOL Internal variable Integer-type (32-bit) Internal variable DINT REAL number-type (32-bit) Internal variable REAL Input/Output variable Data Setting from external device Analog input indication Discrete I/O structure IO_BOOL Analog I/O structure IO_REAL Data Setting (BOOL) Function block ECW_B Data Setting (integer) Function block ECW_I Data Setting (real number) Function block ECW_R Analog Input Function Block with Data Status Function block ANLG_S Analog Input Function block ANLGI Velocity limit Velocity Limit Alarm Function block VEL Annunciator Annunciator Function block ANN First-up Alarm Annunciator Function block ANN_FUP Grouping Override (BOOL) Function block GOV_B Grouping Override (discrete) Function block GOV_IB Override (BOOL) Function block OVR_B Override from HIS Override (integer) Function block OVR_I Override (real number) Function block OVR_R Override (discrete) Function block OVR_IB Override (analog) Function block OVR_IR Password Password entry Function block PASSWD BOOL-Type Data Manual Operation Function Block with Two-Position Answerback Function block MOB_11 Manual operation BOOL-Type Data Manual Operation Function Block with Three-Position Answerback Function block MOB_21 Auto-Reset BOOL-Type Data Manual Operation Function block MOB_RS Analog-Type Data Manual Operation Function block MOA Subsystem Communication Input (BOOL) Function block SCI_B Subsystem Communication Input (integer) Function block SCI_I Subsystem Subsystem Communication Input (real number) Function block SCI_R Subsystem Communication Output (BOOL) Function block SCO_B Subsystem Communication Output (integer) Function block SCO_I Subsystem Communication Output (real number) Function block SCO_R GS 32Q03B20-31E July 21,

9 9 Modbus Connection Function SCS can communicate with external equipment, such as sequencers, with Modbus protocol via a serial communication module (ALR111, ALR121). SCS acts as a Modbus master and can read and write external equipment data. External equipment also acts as a Modbus master and can read and write SCS data. Refer to ALR111/ALR121 Serial Communication Module (GS 32Q06K50-31E) when SCS becomes the Modbus master side. When external equipment becomes the Modbus master side, refer to ALR111/ALR121 Serial Communication Module (GS 32Q06K50-31E) or ALE111 Ethernet Communication Module (GS 32Q06K51-31E). The Modbus connection function is interference-free. Communication module Modbus connection function SCS acts as a Modbus master External equipment acts as a Modbus master Serial communication module X X Ethernet communication module X X: Supported : Not supported Sequence-of-events Recorder (SOER) Function The SOER function is composed of an event collection sub-function, event storage sub-function, and time synchronization sub-functions. The HIS can display event information when an SOE viewer package is run on the HIS. Event collection and storage sub-function Event information is collected and stored in the digital input module or in the CPU module of an SCS. Time stamp resolution of events collected by a digital input module is 1 ms. Other events are collected by CPU module and their time stamp resolution is SCS scan period. Event information to be collected According to the user definition, SCSs can collect the event information listed in the table below. Information to be collected Digital input Digital output Analog input Application logic variable Trigger for event collection and location for collection Changes in the value of data input into the digital input module are set to act as a trigger. This trigger instructs the digital input module to collect events. Whether or not to perform SOE collection can be specified for each channel. (*1)(*3) Changes in the value of data output to the digital output module are set to act as a trigger. This trigger instructs the CPU to collect events. Whether or not to perform SOE collection can be specified for each channel. (*2)(*3) The analog input function block determines the level of the data value for event collection. (*4) Each of BOOL-type, INTEGER-type, and REAL-type SOE event collection function blocks collects events. (*4) *1: If the digital input module is dual-redundant, the module with control authority collects events. *2: If the output channel is abnormal (the data status is BAD), events are not collected. *3: A channel comment (a string composed of a maximum of 32 single-byte characters or 16 double-byte characters) needs to be set. *4: A sequential event identifier (a string composed of a maximum of 32 single-byte characters or 16 double-byte characters) needs to be set to the input terminal ID in a function block. Collect analog output events by a function block for constant SOE event collection. Storage of Event Information Event information is stored in an event information file in an SCS. Such event information can be seen from multiple SOE viewers. There are two kinds of event information files: an event log file and a trip signal file. The event log file contains collected event data. The trip signal file contains events before and after a trip signal that has been specified by a user. Table Event Information File Specification Event log file (*1) Trip signal file (*2)(*3) Maximum number of events events 1500 events (500 before signal generation and 1000 after signal generation) Maximum number of files 1 2 *1: A diagnosis information message is transmitted to the user every events. *2: Upon completion of trip signal file collection, a diagnosis information message is transmitted. *3: If the number of events is fewer than 1000 in 30 minutes after the signal is generated, the creation of a trip signal file is terminated. Then a diagnosis information message is transmitted. GS 32Q03B20-31E Nov. 28,

10 10 Diagnosis Information Collection Function An SCS transmits a diagnosis information message when it detects an abnormal condition. The transmitted message is stored in the memory of an SCS as diagnosis information. Based on the message contents, information on the time, location, type, etc., of the abnormality can be obtained. An SCS can store up to 5000 pieces of information. PRM-supported HART On-demand Communication On-demand communication with a HART device is implemented by Plant Resource Manager (PRM) issuing a HART command, and then receiving a response from the HART device via the SCS. Analog input/output modules with HART function (SAI143-H, SAI533-H) serve as communication relays. Test Function In case of integration with CENTUM VP, the test function can be used. There are two kinds of test. One is designed to debug applications when FCS simulator, SCS simulator and HIS virtual function operate on the PC and the PC is virtually isolated from V net or Vnet/IP. The other is a target test by using actual SCS. For CENTUM VP test function, please refer to Test Function (GS 33K10D50-50E). SCS Simulator SCS simulator has SCS system software operating in SCS operate in the PC. It makes possible for the machine to communication with virtual HIS, FCS simulator and SCS simulator on other PCs. It also has an interface function (Exatif) to plant training system used for operator training. Connect to Plant Expert System (using Exatif Package) V net or Vnet/IP interface for plant expert system environment is supported. Standard system configuration is required for more continuous, stable operation than that for test functions. For details, please refer to Expanded Test Functions, FCS Simulator Package, HIS Simulator Package (GS 33K10D60-50E). Model Computer Dynamic Simulator PC5 Manager SENG Ethernet PC1 PC2 PC3 PC4 Link software HIS Interface FCS Interface SCS Interface Libraries HIS Simulator FCS Simulator SCS Simulator Project Database Engineering Function PC1: Engineering Function PC2: HIS + HIS Simulator PC3: FCS Simulator PC4: SCS Simulator PC5: SENG Figure Example of System Configuration F06.ai GS 32Q03B20-31E Nov. 28,

11 11 Table Package required for each PC on Plant Expert System Product Package PC1 PC2 PC3 PC4 PC5 ProSafe-RS CHS5100 Safety System Generation and Maintenance Package X CHS5200 CENTUM VP/CS 3000 Integration Engineering Package X LHS1100 Standard Operation and Monitoring Function X X LHS5100 Standard Builder Function X CENTUM VP (*1) LHS5420 Test Function (*2) X LHS5425 Expanded Test Function Package X LHS5426 FCS Simulator Package (*3) X X LHS5427 HIS Simulator Package X X Exatif (*4) X X X X X: Required : Not Required *1: CENTUM VP R4.01 or later *2: Including the FCS simulator and HIS simulator *3: Including the SCS simulator *4: Install the package in each PC APPLICATION CAPACITY The capacity of the safety control functions of an SCS is called the application capacity. The application capacity of an SCS is as follows: Category Item Maximum capacity Number of safety node units 9 6 (when 2 ESB Bus coupler modules are mounted) (*1) Number of slots 8 (when 2 ESB Bus coupler modules are not mounted) I/O-related items Number of communication modules 6 (2 modules as slaves and 4 modules as masters) Number of I/O points 1000 (*2) Number of subsystem communication data items 500 (maximum communication data items per SCS) Application logic Inter-SCS Safety Communication SCS Link Transmission VP/CS 3000 integration function Number of POUs (*3) 500 Number of variables Number of produced data 200 Number of consumed data 200 Number of transmitted data 128 Number of received data 1000 Number of analog input blocks Number of velocity alarm blocks Number of override blocks total 1800 Number of password blocks Manual operation function block Number of words contained in 500 communication I/O data Number of annunciators I/O variables (*2) 3000 internal variables (*2) *1: Two ESB Bus coupler modules (SEC401) connect a safety control unit with a safety node unit via ESB bus cables. *2: The numbers are just for reference. *3: POU (Program Organization Unit) is a generic term indicating programs, user defined function blocks, and user defined functions. Subject to change without notice. GS 32Q03B20-31E Nov. 28,

12 12 MODELS AND SUFFIX CODES Description Model CFS1100 Safety Control Functions Package Note: A purchase order for the CFS1100 can be placed using the Model and Suffix Codes of SSC50 /SSC10. A separate order is not necessary. OPERATING ENVIRONMENT CFS1100 Safety Control Functions Package works by the following safety control units: SSC50S, SSC50D, SSC10S and SSC10D. TRADEMARKS ProSafe, CENTUM and Vnet/IP are registered trademarks of Yokogawa Electric Corporation. Other company and product names appearing in this document are trademarks or registered trademarks of their respective holders. GS 32Q03B20-31E Nov. 28,